Add QR code scanning between software wallet & cold signer (hardware wallet)

Wallets
#1

Hi Magicians.

I am Lixin from Keystone hardware wallet. As a user, we are not satisfied with the current signing solution for DeFi (Ledger + MetaMask). We came up with a new solution for it.

PoC

We forked MetaMask and created a PoC for QR code signing between our hardware wallet Keystone and the browser extension.

Motivation

  • USB connectivity could break from time to time. QR code causes much less compatibility issues. Much better experience not only for users but also for developers.
  • With QR code, users can easily turn their old mobile phone into a offline signing device turning on airplane mode with app like Airgap. (Note: another great QR based hww is Ngrave and they share the same opinion with us.)
  • With big screen & ABI encoding, complex DeFi transactions can be fully verified on the cold signer (hardware wallet) otherwise the user is blindly trusting the software wallet which can be compromised much more easily compared to the cold signer (hardware wallet). GridPlus is fixing this vulnerability too and they are awesome.

Importance of Composable Wallets

Personally I really agree with Andrew Hong’s view about wallets.

  • Cold signer (hardware wallet) should be specialized on “Security Layer” in the ecosystem.
  • Cold signer (hardware wallet) should be as compatible as possible with other software wallets.
  • ABI encoding is an essential part for cold signer (hardware wallet).

Next Steps

  1. We are talking with MetaMask, xDeFi and GasNow for integration.
  2. We will raise an EIP for the standard of QR code protocol between cold signer (hardware wallet) and software wallet. More details will be posted within this week or next.
  3. Adding more ABIs to our product (firmware update is needed).

Please throw me any questions/concerns you have. All ears here :slight_smile:

2 Likes
#2

As a user, we are not satisfied with the current signing solution for DeFi (Ledger + MetaMask). We came up with a new solution for it.

IMO, the QR flow is interesting and maybe easier for some users than connecting over USB, but it doesn’t solve what happened to the Nexus Mutual founder.

What does solve that is supporting ABIs in hardware wallets.

I’m curious how you guys go about adding ABIs? Does your team review ABIs for popular applications and then bundle them with your firmware? Do you allow your users to use their own ABIs? Why don’t other hardware wallets have this functionality?

1 Like
#3

+1 For making it easier to sign from an air-gapped wallet, with much better understanding of what I’m signing.

Have you checked out Parity Signer?

#4

100% agree.
With QR code, every piece of information getting in&out of the device is auditable/verifiable.

re Parity Signer -
Yes we know it. It’s a great tool but it seems like it’s not actively maintaining (correct me if I am wrong).

For making a offline mobile phone into a cold signer, airgap.it is actively working on that. And they will align their QR protocol with us so we can be compatible with the same software wallets and ETH community will have much more options.

#5

Thanks for those questions.

Yes. QR code only solves the problem of USB’s bad connectivity.

To solve the Nexus Mutual founder’s problem, these are needed:

  • Big screen for easily verifying complex DeFi transactions.
  • Embed ABIs into hardware wallet

And yes we are working on this.

From the video in the tweet you can see we embedded the ABI of Uniswap V2 and shows the details of the unsigned swap transactions. You can also check the screen shot below (we even highlighted the swap destination address if it’s not consistent with your from address).

How Keystone sign a Uniswap tx
How Keystone sign a Uniswap tx511Ă—1600 104 KB

Does your team review ABIs for popular applications and then bundle them with your firmware?

These are the ABIs we have added. And we are adding more.

Do you allow your users to use their own ABIs?
This is doable and we are researching for a proper solution for it. It needs some time because this may involve some security issues.

Why don’t other hardware wallets have this functionality?
Just my 2 gwei -

  1. Most hwws are “stateless” design. They minimize what to store on the device. This design is kind of out-dated as blockchain develops really fast. To fully verify more and more complex transactions you have to store something more than just seed or private keys.
  2. As I mentioned above, storing ABIs is not enough. UX wise, big screen is a must. It doesn’t make too much sense by just adding ABIs. This might be the reason why they are not doing this.
1 Like